OATH Toolkit 安全漏洞

OATH Toolkit is an open source toolkit from deepin. A security vulnerability exists in OATH Toolkit versions 2.6.7 through 2.6.11, which stems from a PAM module that allows a malicious user to compromise the environment when placing an OTP status file in a user's home directory...

Malicious code in ds-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13795fdee5b77f52426cd3650250e826b6df39c418ac2956442a8016b4535e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9039 Malicious code in ds-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13795fdee5b77f52426cd3650250e826b6df39c418ac2956442a8016b4535e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-47044

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device...

CVE-2024-47045

Privilege chaining issue exists in the installer of e-Tax softwarecommon program. If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege...

CVE-2024-47045

Privilege chaining issue exists in the installer of e-Tax softwarecommon program. If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege...

CVE-2024-47045

A privilege chaining issue (CWE-268) exists in the installer of the e-Tax software (common program) provided by the National Tax Agency (NTA) of Japan. The vulnerability allows an attacker to upload a malicious DLL and execute it with higher privileges than a general user by altering the registry...

PT-2024-32369

Name of the Vulnerable Software and Affected Versions Home GateWay/Hikari Denwa routers affected versions not specified Description The issue is related to insufficient access restrictions for Device Setting pages in the affected routers. If exploited, an attacker who has identified the WAN-side...

CVE-2024-47044: User Interface (UI) Misrepresentation of Critical Information

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device...

Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions

Overview Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Keishi Awata of logicalmixed reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Old Age Home Management System 1.0 Insecure Settings

==================================================================================================================================== | Title : Old Age Home Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

编号撤回

Envoy is an Enphase open source gateway program for connecting smart home devices. This CVE number has been withdrawn...

Envoy 安全漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in versions prior to Envoy 1.32.0 that stems from allowing an external client to manipulate the Envoy header, which can lead to unauthorized access or other malicious operations with...

Cross Site Scripting(XSS)

concrete5/concrete5 is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to insufficient sanitization of the "Top Navigator Bar" block, allowing a rogue administrator to inject a malicious payload that executes when users visit the home page...

GHSA-998C-Q8HH-H8GV Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient sanitization of the Top Navigator Bar block output. An attacker can execute arbitrary scripts in the context of the user's browser session ...

Concrete CMS 安全漏洞

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. A security vulnerability exists in Concrete CMS versions 9.0.0 through 9.3.3, which stems from improper output cleanup, resulting in a malicious administrator being able to add a malicious load th...

CVE-2024-8660: Improper Neutralization of Input During Web Page Generation

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue administrator could add a malicious payload that could be executed when targeted users visited the ho...

Smart home security advice. Ring, SimpliSafe, Swann, and Yale

Introduction This guide covers the security of smart home security products from Ring, Yale, Swann, and SimpliSafe. Whether you're looking to monitor your property remotely, enhance your home's security, or see who’s at the front door, this guide will provide you with valuable insights. We have...

D-Link DNS-320 信息泄露漏洞

The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability that stems from the fact that incorrect operation of the...